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Notice of Payment Card Data Incident 

Des Moines, IA (Aug. 14, 2019) - See below for a statement from Hy-Vee, Inc. regarding an investigation the 
company is conducting into a data incident involving its payment processing systems: 

Hy-Vee takes the security of payment card data very seriously. We want to make customers aware of an 
investigation we are conducting into a security incident involving our payment processing systems that is focused 
on transactions at some Hy-Vee fuel pumps, drive-thru coffee shops, and restaurants, as well as to provide 
information on the measures we have taken in response and steps customers may consider taking as well. 

After recently detecting unauthorized activity on some of our payment processing systems, we immediately 
began an investigation with the help of leading cybersecurity firms. We also notified federal law enforcement 
and the payment card networks. We believe the actions we have taken have stopped the unauthorized activity 
on our payment processing systems. Our investigation is focused on card transactions at our fuel pumps, drive- 
thru coffee shops, and restaurants (which include our Market Grilles, Market Grille Expresses and the 
Wahlburgers locations that Hy-Vee owns and operates). These locations have different point-of-sale systems 
than those located at our grocery stores, drugstores and inside our convenience stores, which utilize point-to- 
point encryption technology for processing payment card transactions. This encryption technology protects card 
data by making it unreadable. Based on our preliminary investigation, we believe payment card transactions that 
were swiped or inserted on these systems, which are utilized at our front-end checkout lanes, pharmacies, 
customer service counters, wine & spirits locations, floral departments, clinics and all other food service areas, as 
well as transactions processed through Aisles Online, are not involved. 

Because the investigation is in its earliest stages, we do not have any additional details to provide at this time. 
We will provide notification to our customers as we get further clarity about the specific timeframes and 
locations that may have been involved. 

It is always advisable to closely monitor your payment card statements for any unauthorized activity. If you see 
an unauthorized charge, immediately notify the financial institution that issued the card because cardholders are 
not generally responsible for unauthorized charges reported in a timely manner. The phone number to call is 
typically located on the back of the payment card. 

For more information, please visit www.hy-vee.com/protectingourcustomers . 

ABOUT HY-VEE, INC. 

Hy-Vee, Inc. is an employee-owned corporation operating more than 260 retail stores across eight Midwestern 
states with sales of $10 billion annually. The supermarket chain is synonymous with quality, variety, 
convenience, healthy lifestyles, culinary expertise and superior customer service. Hy-Vee ranks in the Top 10 
Most Trusted Brands and has been named one of America's Top 5 favorite grocery stores. The company's more 
than 80,000 employees provide "A Helpful Smile in Every Aisle" to customers every day. For additional 
information, visit www.hy-vee.com . 





